Cross-Site Scripting
13 records65%First: 2023. Latest: 2026.
Plugin security history
Robo Gallery – Photo & Image Slider Vulnerability History & Security Timeline
The Wordfence Intelligence dataset currently contains 20 vulnerability records associated with Robo Gallery – Photo & Image Slider, published between 2016 and 2026.
Dataset last synchronized: 2026-08-03 00:31:25 UTC
At a glance
Security Snapshot
20Total records
1Critical
2High
17Medium
0Low
0Informational
20Patched records
0Currently marked unpatched
2016-04-12First disclosure
2026-04-07Latest disclosure
19 of 20CVE coverage
Use this history
Check and watch Robo Gallery – Photo & Image Slider.
A history record does not establish whether the version installed on your website is affected. Enter the exact version in the checker, or add this software to a private Critical/High alert watchlist.
Year-by-Year Timeline
| Year | Records | Relative volume |
|---|---|---|
| 2016 | 1 | |
| 2022 | 1 | |
| 2023 | 4 | |
| 2024 | 8 | |
| 2025 | 4 | |
| 2026 | 2 |
Severity Breakdown
| Severity | Records | Share |
|---|---|---|
| Critical | 1 | 5% |
| High | 2 | 10% |
| Medium | 17 | 85% |
Vulnerability-Type Breakdown
CSRF
3 records15%First: 2023. Latest: 2024.
Missing Authorization
2 records10%First: 2022. Latest: 2024.
Other
1 record5%First: 2016. Latest: 2016.
Information Disclosure
1 record5%First: 2024. Latest: 2024.
Patch Status
- Patched
- 20
- Currently marked unpatched
- 0
- Unknown status
- 0
Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.
Latest Known Patched Versions
5.1.45.1.33.2.235.0.33.2.243.2.223.2.203.2.193.2.183.2.163.2.133.2.113.2.122.0.15
Affected-Version History
Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.
| Affected range | Vulnerability | Published | Patched version | Severity |
|---|---|---|---|---|
*-5.1.3 | Robo Gallery <= 5.1.3 - Authenticated (Author+) Stored Cross-Site Scripting via 'Loading Label' Setting | April 7, 2026 | 5.1.4 | Medium |
*-5.1.2 | Robo Gallery <= 5.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting | February 14, 2026 | 5.1.3 | Medium |
*-3.2.22 | Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library | July 2, 2025 | 3.2.23 | Medium |
*-5.0.2 | Robo Gallery <= 5.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting | May 7, 2025 | 5.0.3 | Medium |
*-3.2.21 | Photo Gallery, Images, Slider in Rbs Image Gallery <= 3.2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting | March 11, 2025 | 3.2.22 | Medium |
*-3.2.23 | Photo Gallery, Images, Slider in Rbs Image Gallery <= 3.2.23 - Authenticated (Admin+) Stored Cross-Site Scripting | March 3, 2025 | 3.2.24 | Medium |
*-3.2.21 | Photo Gallery, Images, Slider in Rbs Image Gallery <= 3.2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting | December 17, 2024 | 3.2.22 | Medium |
*-3.2.21 | Robo Gallery <= 3.2.21 - Authenticated (Author+) Stored Cross-Site Scripting | October 21, 2024 | 3.2.22 | Medium |
*-3.2.21 | Photo Gallery, Images, Slider in Rbs Image Gallery <= 3.2.21 - Missing Authorization to Authenticated (Subscriber+) Private Gallery Title Disclosure | October 7, 2024 | 3.2.22 | Medium |
*-3.2.19 | Photo Gallery, Images, Slider in Rbs Image Gallery <= 3.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Title | July 24, 2024 | 3.2.20 | Medium |
*-3.2.19 | Photo Gallery, Images, Slider in Rbs Image Gallery <= 3.2.19 - Authenticated (Author+) Stored Cross-Site Scripting via Image Title | June 18, 2024 | 3.2.20 | Medium |
*-3.2.19 | Photo Gallery, Images, Slider in Rbs Image Gallery <= 3.2.19 - Cross-Site Request Forgery to Post Creation and Limited Data Loss | June 18, 2024 | 3.2.20 | High |
*-3.2.18 | Robo Gallery <= 3.2.18 - Unauthenticated Information Exposure | May 3, 2024 | 3.2.19 | Medium |
*-3.2.17 | Robo Gallery <= 3.2.17 - Authenticated (Author+) Stored Cross-Site Scripting | January 17, 2024 | 3.2.18 | Medium |
*-3.2.15 | Robo Gallery <= 3.2.15 - Authenticated(Administrator+) Stored Cross-Site Scripting | August 15, 2023 | 3.2.16 | Medium |
*-3.2.12 | Robo Gallery <= 3.2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes | March 13, 2023 | 3.2.13 | Medium |
*-3.2.9 | Robo Gallery <= 3.2.9 - Cross-Site Request Forgery via getPluginStatus | February 2, 2023 | 3.2.11 | Medium |
*-3.2.11 | Robo Gallery Plugin <= 3.2.11 - Cross-Site Request Forgery | January 30, 2023 | 3.2.12 | Medium |
*-3.2.9 | Photo Gallery, Images, Slider in Rbs Image Gallery <= 3.2.9 - Missing Authorization | December 12, 2022 | 3.2.11 | High |
[*, 2.0.15) | Photo Gallery, Images, Slider in Rbs Image Gallery <= 2.0.14 - Remote Code Execution | April 12, 2016 | 2.0.15 | Critical |
Selected source records
Latest Records
MediumCVE-2026-4300
Robo Gallery <= 5.1.3 - Authenticated (Author+) Stored Cross-Site Scripting via 'Loading Label' Setting
Published: April 7, 2026
- Affected versions
- *-5.1.3
- Patched versions
- 5.1.4
MediumCVE-2026-32356
Robo Gallery <= 5.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published: February 14, 2026
- Affected versions
- *-5.1.2
- Patched versions
- 5.1.3
MediumCVE-2024-5647
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library
Published: July 2, 2025
- Affected versions
- *-5.1.2
- Patched versions
- 5.1.3
- Affected versions
- *-4.27.1
- Patched versions
- 4.27.2
- Affected versions
- *-4.27.1
- Patched versions
- 4.27.2
- Affected versions
- *-3.6.0
- Patched versions
- 3.6.1
- Affected versions
- *-3.2.22
- Patched versions
- 3.2.23
- Affected versions
- *-3.12.2
- Patched versions
- 3.12.3
- Affected versions
- *-4.27.1
- Patched versions
- 4.27.2
- Affected versions
- *-2.5.52
- Patched versions
- 2.5.53
- Affected versions
- *-7.4.2
- Patched versions
- 7.4.3
- Affected versions
- *-2.0.5
- Patched versions
- Not supplied
- Affected versions
- *-2.2.14
- Patched versions
- 2.2.15
- Affected versions
- *-4.0.5
- Patched versions
- 4.0.6
- Affected versions
- *-3.4.9
- Patched versions
- Not supplied
- Affected versions
- *-6.0.4
- Patched versions
- 6.0.5
MediumCVE-2025-47521
Robo Gallery <= 5.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Published: May 7, 2025
- Affected versions
- *-5.0.2
- Patched versions
- 5.0.3
MediumCVE-2024-10144
Photo Gallery, Images, Slider in Rbs Image Gallery <= 3.2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published: March 11, 2025
- Affected versions
- *-3.2.21
- Patched versions
- 3.2.22
MediumCVE-2024-13384
Photo Gallery, Images, Slider in Rbs Image Gallery <= 3.2.23 - Authenticated (Admin+) Stored Cross-Site Scripting
Published: March 3, 2025
- Affected versions
- *-3.2.23
- Patched versions
- 3.2.24
MediumCVE-2024-10102
Photo Gallery, Images, Slider in Rbs Image Gallery <= 3.2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published: December 17, 2024
- Affected versions
- *-3.2.21
- Patched versions
- 3.2.22
MediumCVE-2024-49696
Robo Gallery <= 3.2.21 - Authenticated (Author+) Stored Cross-Site Scripting
Published: October 21, 2024
- Affected versions
- *-3.2.21
- Patched versions
- 3.2.22
Highest-Severity Records
Critical
Photo Gallery, Images, Slider in Rbs Image Gallery <= 2.0.14 - Remote Code Execution
Published: April 12, 2016
- Affected versions
- [*, 2.0.15)
- Patched versions
- 2.0.15
HighCVE-2024-5343
Photo Gallery, Images, Slider in Rbs Image Gallery <= 3.2.19 - Cross-Site Request Forgery to Post Creation and Limited Data Loss
Published: June 18, 2024
- Affected versions
- *-3.2.19
- Patched versions
- 3.2.20
HighCVE-2022-45841
Photo Gallery, Images, Slider in Rbs Image Gallery <= 3.2.9 - Missing Authorization
Published: December 12, 2022
- Affected versions
- *-3.2.9
- Patched versions
- 3.2.11
MediumCVE-2024-22295
Robo Gallery <= 3.2.17 - Authenticated (Author+) Stored Cross-Site Scripting
Published: January 17, 2024
- Affected versions
- *-3.2.17
- Patched versions
- 3.2.18
MediumCVE-2026-32356
Robo Gallery <= 5.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published: February 14, 2026
- Affected versions
- *-5.1.2
- Patched versions
- 5.1.3
MediumCVE-2024-10102
Photo Gallery, Images, Slider in Rbs Image Gallery <= 3.2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published: December 17, 2024
- Affected versions
- *-3.2.21
- Patched versions
- 3.2.22
MediumCVE-2023-27620
Robo Gallery <= 3.2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Published: March 13, 2023
- Affected versions
- *-3.2.12
- Patched versions
- 3.2.13
MediumCVE-2024-3896
Photo Gallery, Images, Slider in Rbs Image Gallery <= 3.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Title
Published: July 24, 2024
- Affected versions
- *-3.2.19
- Patched versions
- 3.2.20
Need help reviewing an exposed WordPress website?
Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.
Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.
Data Source, Attribution and Methodology
This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.